SUSE-SU-2026:23482-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437. - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. -...

SUSE-SU-2026:23541-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time bsc1253437. - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. -...

SUSE-SU-2026:23481-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1269731. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...

SUSE-SU-2026:23477-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944 - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...

Security update for xen

This update for xen fixes the following issues: Update to version 4.20.3 jscPED-8907. Security issues fixed: CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling...

SUSE-SU-2026:4087-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. - CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing bsc1276841...

SUSE-SU-2026:23540-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_29

This update for kernel-livepatch-MICRO-6-0-RTUpdate29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...

SUSE-SU-2026:23479-1 Security update for kernel-livepatch-MICRO-6-0_Update_29

This update for kernel-livepatch-MICRO-6-0Update29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...

SUSE-SU-2026:23529-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1269731. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...

SUSE-SU-2026:23528-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944 - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...

SUSE-SU-2026:23476-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

SUSE-SU-2026:23475-1 Security update for NetworkManager

This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...

SUSE-SU-2026:23526-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

Security update for libidn

This update for libidn fixes the following issue: CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed f...

SUSE-SU-2026:4081-1 Security update for libidn

This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965...

Security update for dracut

This update for dracut fixes the following issues: CVE-2026-6893: Root code execution via DHCP options command injection bsc1268322. CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module bsc1273580. Changes for dracut: Update to version...

Security update for wireshark

This update for wireshark fixes the following issues: CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops bsc1271133. CVE-2026-15164: Denial of Service vulnerability in ciscodump bsc1271134. CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector crash...

SUSE-SU-2026:4077-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops bsc1271133. - CVE-2026-15164: Denial of Service vulnerability in ciscodump bsc1271134. - CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector...

Security update for rpcbind

This update for rpcbind fixes the following issue: CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Security update for curl

This update for curl fixes the following issues: CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. CVE-2026-80230: OpenSSL pinning bypass can allow unauthenticated...